On 10-05-09 12:59 PM, John Horne wrote:
> On Fri, 2010-05-07 at 16:44 +0200, Michael Li wrote:
>>              [ Warning ]
>> [15:06:08] Warning: No shadow/password file found.
>>
> You can set the following option in your config file:
> 
>     PASSWORD_FILE=<path to password file>
> 
> RKH will try and determine where the password file is located, but if it
> cannot then you get the above warning. Use the config file option to
> tell RKH where your password file is located.
> (Note: For other OS's this is actually the 'shadow' file, the file which
> contains the actual passwords. The test is to see if an account has no
> password, and to do that we need to check the file containing the actual
> passwords (the shadow file), rather than the file just containing the
> account names (usually the passwd file.))
> 
> If you could let me know the pathname of your file (email me off list
> preferably) then it may be useful to get RKH to check for that
> automatically for OSX users (assuming you are using some sort of
> standard password file for OSX systems). I'll add the pathname into the
> RKH code.
> 
> Again a quick google: It seems a /etc/passwd or /etc/master.passwd file
> may be present. If either is, then set it in the above option. If
> neither is, then you need to disable the password file checks. To do
> this add 'group_accounts' to the DISABLE_TESTS list.

As I understand it, OSX doesn't use a flat file for the user information
(including the actual passwords)

From OSX 10.6
==> cat /etc/passwd
##
# User Database
#
# Note that this file is consulted directly only when the system is running
# in single-user mode.  At other times this information is provided by
# Open Directory.
#
# This file will not be consulted for authentication unless the BSD
local node
# is enabled via /Applications/Utilities/Directory Utility.app
#
# See the DirectoryService(8) man page for additional information about
# Open Directory.
##


Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------

_______________________________________________
Rkhunter-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to